Data Processing Terms

With CLARUS Prime your laboratory's records stay on your computer, so for most of your work we process nothing on your behalf. These terms cover the cases in which we do, under Law 151 of 2020 on the Protection of Personal Data.

Effective date: 23 September 2026.

1.Roles

Your laboratory is the controller of its patients' data. We act as processor only for the services listed below, and only on your instructions, which are the settings you choose in the program and on the website screen.

2.What we process for you

• The laboratory website: the information you choose to publish.
• The result code: sealed copies of reports, encrypted on your computer with a key we never receive. We store them and hand them to whoever presents the code, and we cannot read them.
• Files you choose to send us for support, such as a support report, used only to answer that request and kept only as long as it needs.

3.What we do not process

The records in your laboratory's database, which never reach us. The licence data and the operating counts the program sends are our own records about the licence and carry no patient data; our Privacy Notice lists them.

4.Our commitments

• Process the data only to provide the service, never for our own purposes.
• Keep it confidential: only the people who need it for the service can reach it.
• Protect it with appropriate technical and organisational measures.
• Tell you without undue delay if we learn of a breach affecting it.
• Help you answer your patients' requests and the authorities' questions.
• Delete it when the service ends, unless the law requires us to keep it.

5.Where it is stored

On servers run by our hosting provider, which processes it only to host it. A sealed report stays unreadable wherever it is stored.

6.Your part

• Have a lawful basis for what you publish or send, and tell your patients about the result code.
• Give each code only to the patient it belongs to.